Hi Atlassian team / community,
I'm currently trying to access some APIs that appear to be private or internal. Specifically:
GET https://www.atlassian.com/hamlet/1.0/public/order/{orderId}/summary
→ Seems to return invoice/order summary info. I get a 403 Forbidden
error.
GET https://www.atlassian.com/gateway/api/available-products/api/available-products
→ Appears to list available products for a site. I cannot access it.
GET https://www.atlassian.com/hamlet/1.0/public/order/external/invoice/{orderId}/pdf
→ I assume this returns a PDF invoice file. Also blocked or inaccessible.
Are these APIs publicly accessible, or are they meant to be internal-only?
Is there any documentation for them?
What authentication method is required (e.g. OAuth scopes, Forge token, admin cookies)?
Are there public alternatives for accessing billing data and available products?
I tested with Postman using admin session cookies.
I couldn't find any mention of these endpoints on developer.atlassian.com.
Thanks in advance for any clarification or official guidance!